Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa
File:                     586a1feb-bb22-34cb-9210-9a24796c79ad.roa (raw, json)
Hash identifier:          HyFsRDkLypzBCPsuveKFX6kFr2uahcaXduPZzbZZfcI=
Subject key identifier:   D5:91:1D:C6:E1:57:BB:25:6E:95:F7:F1:95:B7:FF:A2:7B:B9:40:F0
Certificate issuer:       /CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
Certificate serial:       010D0C9F4328584ADA9BC3BBD6D87788B3B34800
Authority key identifier: 70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     1820
IP address blocks:        64.49.64.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c3:bb:d6:d8:77:88:b3:b3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=63b0f557-4d8d-4a35-93b4-d03f7192d79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:70:fa:0e:1f:12:e1:7c:db:34:79:0a:ad:
                    a2:eb:a3:f1:28:64:bc:4e:3e:45:95:c4:5b:01:23:
                    46:15:32:17:a0:78:4b:29:6b:cf:ea:5f:75:a7:4e:
                    cc:91:38:01:6d:20:36:3e:24:50:05:c7:82:cb:c7:
                    b3:7b:38:b3:2c:c1:1d:b4:a8:25:89:17:10:62:21:
                    89:45:bb:71:31:3d:15:b6:de:04:36:ed:63:9d:4d:
                    9a:87:d2:01:da:53:c4:a5:84:cc:28:c1:cc:44:46:
                    ab:32:cb:89:ca:14:c3:a4:25:54:f1:59:ff:19:4a:
                    18:55:ba:98:42:87:6e:8f:fb:d9:84:6b:c2:73:e2:
                    43:ca:5b:44:28:91:b7:58:65:b1:55:a4:70:2d:6c:
                    68:d1:32:8e:5f:f5:a1:84:35:52:f1:0a:0f:d7:50:
                    f4:35:42:cb:a8:dd:41:8a:1f:70:aa:8c:39:4a:31:
                    7e:95:cc:3d:94:41:32:30:02:08:86:9c:da:51:95:
                    1d:70:65:54:98:67:8b:2f:c5:87:86:12:f6:19:cf:
                    26:da:28:8d:fa:94:10:c3:74:c9:e6:06:ea:da:3a:
                    ae:7c:80:7d:8b:01:b0:f8:c1:95:63:db:67:14:b6:
                    b6:a2:66:88:0b:c7:68:41:e5:2d:b8:de:37:88:d2:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:91:1D:C6:E1:57:BB:25:6E:95:F7:F1:95:B7:FF:A2:7B:B9:40:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.crl

            X509v3 Authority Key Identifier:
                keyid:70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a9:de:34:f1:60:d3:94:ec:84:c9:45:dc:88:43:3e:49:0f:
         b2:3a:9e:e0:f5:31:bc:c1:91:e3:0d:1f:51:2c:8e:c6:d5:ce:
         f4:79:26:94:ea:b8:d2:d8:62:ca:52:3e:7d:d9:6a:da:f0:4d:
         89:92:9d:64:35:29:37:48:c4:ce:3f:ed:7c:a2:1e:a1:3b:0b:
         04:48:e5:1a:ae:e7:29:07:0d:ea:03:96:5d:ee:4e:17:e7:51:
         f3:11:1f:01:a8:d5:bb:65:9b:f4:a5:2a:5f:a0:ba:47:42:7a:
         a5:84:d6:f3:37:6f:aa:7f:e7:80:aa:2f:f5:60:e3:28:ad:14:
         79:0c:28:46:fd:5b:f2:ab:b5:5d:ca:69:8c:c2:37:69:8e:9b:
         8b:ec:a1:77:f1:02:de:fd:86:f4:cf:85:45:69:1a:91:c5:e2:
         c0:c8:5b:43:2a:d9:5d:75:50:8a:20:e9:30:3c:e8:0d:dc:48:
         4a:a7:1b:2f:75:d4:a3:38:7f:48:db:dc:2a:20:a3:ce:28:94:
         1a:a8:00:dc:f7:11:f0:d0:94:98:d1:6e:88:7b:37:5d:64:b8:
         1c:f6:7c:b9:2a:39:27:fa:33:d9:6e:5b:50:25:d9:23:b3:77:
         a0:94:7b:a6:d6:5a:12:1b:56:e0:82:b3:4b:43:23:8c:3e:dc:
         75:57:57:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8O71th3iLOzSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2I3OThhYWQtMmE4ZC00Y2Q1LTk1MTctNmEyODg5MGFk
NGVjMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
NjNiMGY1NTctNGQ4ZC00YTM1LTkzYjQtZDAzZjcxOTJkNzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjZw+g4fEuF82zR5Cq2i66PxKGS8Tj5FlcRb
ASNGFTIXoHhLKWvP6l91p07MkTgBbSA2PiRQBceCy8ezezizLMEdtKgliRcQYiGJ
RbtxMT0Vtt4ENu1jnU2ah9IB2lPEpYTMKMHMREarMsuJyhTDpCVU8Vn/GUoYVbqY
Qoduj/vZhGvCc+JDyltEKJG3WGWxVaRwLWxo0TKOX/WhhDVS8QoP11D0NULLqN1B
ih9wqow5SjF+lcw9lEEyMAIIhpzaUZUdcGVUmGeLL8WHhhL2Gc8m2iiN+pQQw3TJ
5gbq2jqufIB9iwGw+MGVY9tnFLa2omaIC8doQeUtuN43iNKvUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWRHcbhV7slbpX38ZW3/6J7uUDwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Yjc5
OGFhZC0yYThkLTRjZDUtOTUxNy02YTI4ODkwYWQ0ZWMvNTg2YTFmZWItYmIyMi0z
NGNiLTkyMTAtOWEyNDc5NmM3OWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2I3OThhYWQtMmE4ZC00Y2Q1LTk1
MTctNmEyODg5MGFkNGVjLzdiNzk4YWFkLTJhOGQtNGNkNS05NTE3LTZhMjg4OTBh
ZDRlYy5jcmwwHwYDVR0jBBgwFoAUcEeAHzPhboB5ETT4nK6xzFZHv3AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83Yjc5OGFhZC0yYThkLTRjZDUtOTUxNy02YTI4
ODkwYWQ0ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQDFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSp3jTxYNOU7ITJRdyIQz5JD7I6nuD1MbzBkeMNH1EsjsbVzvR5JpTq
uNLYYspSPn3ZatrwTYmSnWQ1KTdIxM4/7XyiHqE7CwRI5Rqu5ykHDeoDll3uThfn
UfMRHwGo1btlm/SlKl+gukdCeqWE1vM3b6p/54CqL/Vg4yitFHkMKEb9W/KrtV3K
aYzCN2mOm4vsoXfxAt79hvTPhUVpGpHF4sDIW0Mq2V11UIog6TA86A3cSEqnGy91
1KM4f0jb3Cogo84olBqoANz3EfDQlJjRboh7N11kuBz2fLkqOSf6M9luW1Al2SOz
d6CUe6bWWhIbVuCCs0tDI4w+3HVXVyo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:03 2025 by rpki-client